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DETAILED ACTION 
Response to Amendment 

1 . This action is in response to the amendment filed on June 8, 2006. Claims 36-38 
are newly added. 

2. Claims 1-16, 18,20, and 22-38 are currently being considered. 

Response to Arguments 

3. Applicant's arguments filed June 8, 2006 have been fully considered but they are 
not persuasive for the following reasons: 

Regarding claim 1 , the Applicant argues that the Cited Prior Art (CPA), Gelman 
et al. (U.S. 6,415,329), does not teach tearing down the unspoofed connection based 
upon the identifying step. The Applicant states that there is no identifying step which 
leads to the termination of the tearing down of the unspoofed connection. This 
argument is not found persuasive. The CPA discloses "selectively changing the 
destination addressing information of incoming packets which are to be transmitted on 
the wireless link, to that of the gateway application's main socket, forcing the connection 
to be terminated" (column 10 lines 3-8). The emphasis should be put on the "selectively 
changing" and the fact that only the packets which are to be transmitted on the wireless 
link are spoofed. The identifying step is discussed by the CPA by stated "each GT 
gateway application 76 listens for incoming TCP connections on its main socket, which 
differs from the destination socket of packets traversing the wireless link" (column 9 line 
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66 - column 10 line 1 ). Therefore, the identifying step is performed by the gateway by 
listening for TCP packets which are going to traverse the wireless link. 

Furthermore, the Applicant argues that motivation for using the secondary 
reference, Albert et al. (6,742,045), in combination with Gelman to teach a redundant 
platform for spoofing. This is not found persuasive. Gelman discusses limitations of the 
gateway, and states "a gateway may crash before all of the data has successfully 
reached the client" (column 14 lines 48-51). It is clear that Gelman viewed this crashing 
as a limitation of the reliability of TCP, and therefore, using the redundant platform 
disclosed by Albert would have been obvious for reasons stated in the previous Office 
action. 

Regarding the newly added claims 36-38, the Applicant argues that the CPA 
does not teach "wherein the spoofed connection utilizes a protocol to alter the behavior 
of the spoofed connection by performing one of three-way handshake spoofing, local 
data acknowledgement, connection to backbone connection multiplexing, data 
compression, or prioritization of connections." This argument is not found persuasive. 
Gelman teaches a system comprising a client, a client gateway, a server, and a server 
gateway (column 16 lines 27-45). In the case of Gelman, instead of the server 
acknowledging the client, the client gateway acknowledges the client (local 
acknowledgement), but modifies the SYN packet so that the client thinks it is coming 
from the server (column 16 lines 39-45). Therefore, it is asserted that this spoofed 
connection utilizes local acknowledgements, and therefore, is taught by the CPA. 
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Therefore, the rejections for the pending claims is maintained as given below, 
and applied to the newly added claims 36-38. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1-16,18,20, and 22-38 are rejected under 35 U.S.C. 103(a) as being 

unpatentable over Gelman et al. (U.S. Patent No. 6,415,329) in view of Albert et al. 

(U.S. Patent No. 6,742,045). 

Regarding claim 1, Gelman discloses: 

A method for performing redundancy switching from a first platform to a second 
platform, the method comprising: 

identifying a message received over an unspoofed connection according to a 
prescribed protocol as an unspoofed message (column 4 lines 10 -45, column 9 line 66 
- column 10 line 8); 

tearing down, during a predetermined period, the unspoofed connection based 
upon the identifying step (Figure 10, column 10 lines 1 - 8, column 15 line 47 - column 
17 line 20). 
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Gelman does not explicitly disclose restarting a spoofed connection between the 
second platform and a host wherein the second platform serves as a redundant platform 
for the first platform, and the predetermined period is set to minimize delay for restarting 
of the spoofed connection. Albert teaches a system in which service managers have 
backup service managers for the purpose of providing a fail over scheme if a master 
service manager should fail (column 10 lines 41-51). The service managers may be 
implemented on a router, and provide a service for packets before forwarding the 
packets into the network (column 10 lines 24-30). Gelman also discloses apparatuses 
similar to service managers as the Performance Enhancing Proxies (PEPs) provide a 
service of changing the TCP packets in order to spoof a connection over a satellite link. 
Gelman does not explicitly disclose a scheme in the instance that the PEP should fail. 
Albert provides a failover scheme involving backup service managers that would 
continue to provide a specified service to the packets in the event that the main service 
manager should fail. This would provide relatively uninterrupted service to the 
endpoints, besides the startup time for the backup PEP to sync up, which would provide 
packets that could tolerate long delay links (e.g. satellite links). Therefore, it would have 
been obvious to one of ordinary skill in the art at the time the invention was made to 
have a redundant platform setup as in Albert to provide a backup PEP in the system of 
Gelman so that a backup can function as the primary did in the event that the primary 
should fail as to provide PEP service even if the primary PEP fails. Furthermore, the 
"operational status of service managers may be communicated on the service manager 
interface" (Albert: column 10 lines 45-46). The frequency of the updates is a 
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predetermined time set to minimize the down time of a service manager (PEP). 
Therefore, it is asserted that the predetermined time is the time between a service 
manager failing and an update being received, and it would have been obvious at the 
time of invention that this time is set so that there is a minimum down-time of service. 

Regarding claim 8, Gelman discloses: 

A communication system comprising: 

a first platform configured to communicate with a remote platform (Figure 2, 
column 15 line 47 - column 17 line 20); and 

a second platform configured to communicate with the remote platform, the 
second platform being configured to identify a message received from a local host over 
an unspoofed connection according to a prescribed protocol as an unspoofed message, 
wherein the second platform tears down, during a predetermined period, the unspoofed 
connection in response to the identified message to avoid delaying startup of a spoofed 
connection with the remote platform (Figure 2, Figure 10, column 4 lines 10-45, 
column 9 line 66 - column 10 line 8, column 15 line 47 - column 17 line 20). 

Gelman does not explicitly disclose restarting a connection between the second 
platform and a host wherein the second platform serves as a redundant platform for the 
first platform. Albert teaches a system in which service managers have backup service 
managers for the purpose of providing a fail over scheme if a master service manager 
should fail (column 10 lines 41-51). The service managers may be implemented on a 
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router, and provide a service for packets before forwarding the packets into the network 
(column 10 lines 24-30). Gelman also discloses apparatuses similar to service 
managers as the Performance Enhancing Proxies (PEPs) provide a service of changing 
the TCP packets in order to spoof a connection over a satellite link. Gelman does not 
explicitly disclose a scheme in the instance that the PEP should fail. Albert provides a 
failover scheme involving backup service managers that would continue to provide a 
specified service to the packets in the event that the main service manager should fail. 
This would provide relatively uninterrupted service to the endpoints, besides the startup 
time for the backup PEP to sync up, which would provide packets that could tolerate 
long delay links (e.g. satellite links). Therefore, it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to have a redundant platform 
setup as in Albert to provide a backup PEP in the system of Gelman so that a backup 
can function as the primary did in the event that the primary should fail as to provide 
PEP service even if the primary PEP fails. 

Regarding claim 15, Gelman discloses: 

A communication gateway for providing redundant communication in a 
communication system having a remote platform, the gateway comprising: 

a communication interface configured to communicate with a primary gateway 
configured to support a spoofed connection over a backbone connection to the remote 
platform (Figure 10, column 10 lines 1 -8, column 15 line 47- column 17 line 20); and 
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a processor coupled to the communication interface and configured to restart a 
spoofed connection (Figure 2, Figure 10, column 4 lines 10-45, column 9 line 66 - 
column 10 line 8, column 15 line 47 - column 17 line 20). 

Gelman does not explicitly disclose wherein the unspoofed messages are 
forwarded after a predetermined period to avoid delaying the restart of the spoofed 
connection. Albert teaches a system in which service managers have backup service 
managers for the purpose of providing a fail over scheme if a master service manager 
should fail (column 10 lines 41-51). The service managers may be implemented on a 
router, and provide a service for packets before forwarding the packets into the network 
(column 10 lines 24-30). Gelman also discloses apparatuses similar to service 
managers as the Performance Enhancing Proxies (PEPs) provide a service of changing 
the TCP packets in order to spoof a connection over a satellite link. Gelman does not 
explicitly disclose a scheme in the instance that the PEP should fail. Albert provides a 
failover scheme involving backup service managers that would continue to provide a 
specified service to the packets in the event that the main service manager should fail. 
This would provide relatively uninterrupted service to the endpoints, besides the startup 
time for the backup PEP to sync up, which would provide packets that could tolerate 
long delay links (e.g. satellite links). Therefore, it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to have a redundant platform 
setup as in Albert to provide a backup PEP in the system of Gelman so that a backup 
can function as the primary did in the event that the primary should fail as to provide 
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PEP service even if the primary PEP fails. Furthermore, the "operational status of 
service managers may be communicated on the service manager interface" (Albert: 
column 10 lines 45-46). The frequency of the updates is a predetermined time set to 
minimize the down time of a service manager (PEP). Therefore, it is asserted that the 
predetermined time is the time between a service manager failing and an update being 
received, and it would have been obvious at the time of invention that this time is set so 
that there is a minimum down-time of service. 

Regarding claim 22, Gelman discloses: 

A communication gateway for providing redundant communication in a 
communication system having a remote platform, the gateway comprising: 

means for identifying a message received over a connection according to a 
prescribed protocol as an unspoofed message (column 4 lines 10-45, column 9 line 66 
-column 10 line 8); 

means for terminating, during a predetermined period, the connection based 
upon the identified message (Figure 10, column 10 lines 1 - 8, column 15 line 47 - 
column 17 line 20); and 

means for restarting a spoofed connection (Figure 10, column 10 lines 1 - 8, 
column 15 line 47 - column 17 line 20). 

Gelman does not explicitly disclose restarting a connection between the second 
platform and a host upon detection of a redundancy switch, wherein the second 
platform serves as a redundant platform for the first platform wherein the predetermined 
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period is set to minimize delay for restarting of the spoofed connection. Albert teaches 
a system in which service managers have backup service managers for the purpose of 
providing a fail over scheme if a master service manager should fail (column 10 lines 
41-51). The service managers may be implemented on a router, and provide a service 
for packets before forwarding the packets into the network (column 10 lines 24-30). 
Gelman also discloses apparatuses similar to service managers as the Performance 
Enhancing Proxies (PEPs) provide a service of changing the TCP packets in order to 
spoof a connection over a satellite link. Gelman does not explicitly disclose a scheme in 
the instance that the PEP should fail. Albert provides a failover scheme involving 
backup service managers that would continue to provide a specified service to the 
packets in the event that the main service manager should fail. This would provide 
relatively uninterrupted service to the endpoints, besides the startup time for the backup 
PEP to sync up, which would provide packets that could tolerate long delay links (e.g. 
satellite links). Therefore, it would have been obvious to one of ordinary skill in the art 
at the time the invention was made to have a redundant platform setup as in Albert to 
provide a backup PEP in the system of Gelman so that a backup can function as the 
primary did in the event that the primary should fail as to provide PEP service even if 
the primary PEP fails. Furthermore, the "operational status of service managers may be 
communicated on the service manager interface" (Albert: column 10 lines 45-46). The 
frequency of the updates is a predetermined time set to minimize the down time of a 
service manager (PEP). Therefore, it is asserted that the predetermined time is the 
time between a service manager failing and an update being received, and it would 



Application/Control Number: 09/903,780 Page 1 1 

Art Unit: 2131 

have been obvious at the time of invention that this time is set so that there is a 
minimum down-time of service. 

Regarding claim 29, Gelman discloses: 

A computer-readable medium carrying one or more sequences of one or more 
instructions for performing redundancy switching from a first platform to a second 
platform, the one or more sequences of one or more instructions including instructions 
which, when executed by one or more processors, cause the one or more processors to 
perform the steps of: 

identifying a message received over an unspoofed connection according to a 
prescribed protocol as an unspoofed message (column 4 lines 10-45, column 9 line 66 
-column 10 line 8); and 

tearing down, during a predetermined period, the unspoofed connection based 
upon the identifying step (Figure 10, column 10 lines 1 - 8, column 15 line 47 - column 
17 line 20). 

Gelman does not explicitly disclose restarting a spoofed connection between the 
second platform and a host wherein the second platform serves as a redundant platform 
for the first platform and the predetermined period is set to minimize delay for restarting 
of the spoofed connection. Albert teaches a system in which service managers have 
backup service managers for the purpose of providing a fail over scheme if a master 
service manager should fail (column 10 lines 41-51). The service managers may be 
implemented on a router, and provide a service for packets before forwarding the 
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packets into the network (column 10 lines 24-30). Gelman also discloses apparatuses 
similar to service managers as the Performance Enhancing Proxies (PEPs) provide a 
service of changing the TCP packets in order to spoof a connection over a satellite link. 
Gelman does not explicitly disclose a scheme in the instance that the PEP should fail. 
Albert provides a failover scheme involving backup service managers that would 
continue to provide a specified service to the packets in the event that the main service 
manager should fail. This would provide relatively uninterrupted service to the 
endpoints, besides the startup time for the backup PEP to sync up, which would provide 
packets that could tolerate long delay links (e.g. satellite links). Therefore, it would have 
been obvious to one of ordinary skill in the art at the time the invention was made to 
have a redundant platform setup as in Albert to provide a backup PEP in the system of 
Gelman so that a backup can function as the primary did in the event that the primary 
should fail as to provide PEP service even if the primary PEP fails. Furthermore, the 
"operational status of service managers may be communicated on the service manager 
interface" (Albert: column 10 lines 45-46). The frequency of the updates is a 
predetermined time set to minimize the down time of a service manager (PEP). 
Therefore, it is asserted that the predetermined time is the time between a service 
manager failing and an update being received, and it would have been obvious at the 
time of invention that this time is set so that there is a minimum down-time of service. 

Claim 2 is rejected as applied above in rejecting claim 1 . Furthermore, Gelman 
discloses: 
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The method according to claim 1, further comprising: 

invoking a reset function, wherein the reset function transmits a reset message to 
a local host that forwarded the message to tear down the unspoofed connection 
(column 1 0 lines 1-9, column 22 lines 25 - 40, column 23 lines 25 - 34). 

Claim 3 is rejected as applied above in rejecting claim 1. Furthermore, Gelman 
discloses: 

The method according to claim 1 , further comprising: determining whether the 
predetermined period has expired (column 5 lines 10-22, column 10 lines 1 - 38); and 

forwarding unspoofed messages to a remote platform based upon the 
determining step (column 10 lines 1 -38). 

Claim 4 is rejected as applied above in rejecting claim 1. Furthermore, Gelman 
discloses: 

The method according to claim 1 , wherein the prescribed protocol is the 
Transmission Control Protocol, the method further comprising: 

determining whether global TCP spoofing is enabled (column 9 line 16 - column 
10 line 37); and 

selectively forward TCP segments unspoofed to a remote platform (column 9 line 
16 -column 10 line 37). 
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Claim 5 is rejected as applied above in rejecting claim 1. Furthermore, Gelman 
discloses: 

The method according to claim 1 , further comprising: 

establishing a backbone connection from the second platform to a remote 

platform (Figure 10, column 15 line 47 - column 17 line 20); and 

forwarding a spoofed message over the backbone connection to a remote host 

(Figure 10, column 15 line 47 - column 17 line 20). 

Claim 7 is rejected as applied above in rejecting claim 1. Furthermore, Gelman 
discloses: 

The method according to claim 1, further comprising: forwarding messages 
associated with another protocol to a remote platform irrespective of the predetermined 
period (column 9 line 65 - column 10 line 38). 

Claim 6 is rejected as applied above in rejecting claim 1 . Furthermore, Gelman 
discloses: 

The method according to claim 5, wherein the backbone connection in the 
establishing step includes a space link over a satellite network (Figures 1 ,2,14, column 
1 line 21 - column 2 line 32). 

Claim 36 is rejected as applied above in rejecting claim 5. Furthermore, Gelman 
discloses: 
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The method according to claim 5, wherein the spoofed connection utilizes a 
protocol to alter behavior of the spoofed connection by performing one of three-way 
handshake spoofing, local data acknowledgement, connection to backbone connection 
multiplexing, data compression, or prioritization of connections (column 16 lines 27-45), 
wherein the client gateway acknowledges the client instead of the server. 

Claim 37 is rejected as applied above in rejecting claim 12. Furthermore, Gelman 
discloses: 

The method according to claim 5, wherein the spoofed connection utilizes a 
protocol to alter behavior of the spoofed connection by performing one of three-way 
handshake spoofing, local data acknowledgement, connection to backbone connection 
multiplexing, data compression, or prioritization of connections (column 16 lines 27-45), 
wherein the client gateway acknowledges the client instead of the server. 

Claim 37 is rejected as applied above in rejecting claim 26. Furthermore, Gelman 
discloses: 

The method according to claim 26, wherein the spoofed connection utilizes a 
protocol to alter behavior of the spoofed connection by performing one of three-way 
handshake spoofing, local data acknowledgement, connection to backbone connection 
multiplexing, data compression, or prioritization of connections (column 16 lines 27-45), 
wherein the client gateway acknowledges the client instead of the server. 
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5. Claims 9-14 are system claims analogous to the method claims rejected above, 
and therefore, are rejected following the same reasoning. 

6. Claims 16 and 18, and 20 are apparatus claims analogous to the method claims 
rejected above, and therefore, are rejected following the same reasoning. 

7. Claims 23 - 28 are apparatus claims analogous to the method claims rejected 
above, and therefore, are rejected following the same reasoning. 

8. Claims 30 - 35 are computer-readable medium claims analogous to the method 
claims rejected above, and therefore, are rejected following the same reasoning. 

Conclusion 

THIS ACTION IS MADE FINAL Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
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extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kaveh Abrishamkar whose telephone number is 571- 
272-3786. The examiner can normally be reached on Monday thru Friday 8-5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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